Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/eb572130-a757-39eb-b0f3-def7e1598b76.roa
File:                     eb572130-a757-39eb-b0f3-def7e1598b76.roa (raw, json)
Hash identifier:          8e8kKsE7vzRoZEqmQeLMj/tXiG082VtMGcgPRy/XSbY=
Subject key identifier:   DA:89:90:90:1E:09:36:C5:A0:E1:29:D1:A0:DC:10:95:25:D9:DF:E4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B33F1B7D1BF3E22FA879EAA00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/eb572130-a757-39eb-b0f3-def7e1598b76.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     152868
IP address blocks:        66.92.63.0/24 maxlen: 24
                          66.92.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b7:d1:bf:3e:22:fa:87:9e:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=1dc8cbb9-77bc-4a01-9eca-90b6330551a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e5:52:af:bd:f8:82:7d:56:97:e5:34:24:fe:
                    6b:75:4c:16:9b:f2:9c:55:9a:26:b5:58:2a:0a:01:
                    43:00:28:86:8e:e7:a0:db:d5:78:ff:84:82:75:87:
                    bc:38:b8:0f:79:c2:4b:89:57:44:64:f7:9b:65:6f:
                    aa:a7:35:15:4b:f6:fc:0d:e4:30:34:af:c2:cc:b9:
                    91:c4:23:c6:ed:f4:ea:1b:66:7c:c8:93:66:dd:23:
                    fe:ce:66:fa:bb:8a:76:39:9f:a9:8b:79:b3:25:f5:
                    7c:86:4f:75:91:2d:30:33:4e:5b:fa:e0:7d:fd:af:
                    0d:fe:a4:0f:fa:14:a6:34:44:a8:af:ed:6e:b7:58:
                    ad:85:78:e4:b0:ec:41:32:af:6c:bf:e2:f5:38:45:
                    ad:60:a4:8d:d1:03:5a:00:00:a1:ba:6c:7f:e9:54:
                    a8:77:7f:3e:4e:9f:b1:bf:88:8b:2d:45:25:c0:52:
                    35:f6:4f:4c:63:14:17:df:cb:1b:dc:74:e8:7f:c9:
                    89:58:aa:77:cc:a2:d8:ca:e5:cf:34:7c:e3:27:f6:
                    c1:36:9a:dc:f7:6d:5c:e3:35:4d:79:09:e5:87:21:
                    cb:c2:56:03:ad:b6:42:e9:46:53:f2:5b:76:17:98:
                    86:bf:89:6e:89:c6:b7:f1:82:71:7a:78:ab:96:5f:
                    4a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:89:90:90:1E:09:36:C5:A0:E1:29:D1:A0:DC:10:95:25:D9:DF:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/eb572130-a757-39eb-b0f3-def7e1598b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.63.0/24
                  66.92.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:30:55:46:62:84:06:f9:67:c7:87:64:fd:6d:23:b1:65:0e:
         e1:65:fe:02:65:24:3b:95:d2:b3:91:d3:cb:57:cd:f1:8e:5d:
         47:d5:53:0a:4a:1c:65:4e:ca:76:6e:51:54:9c:40:d1:62:43:
         96:dd:16:bc:c7:0b:c4:43:38:f1:36:a7:42:4d:44:40:be:49:
         85:e6:30:95:67:3e:25:99:0d:3d:63:a4:8b:98:77:ac:32:ca:
         48:af:6e:b3:49:e3:f4:77:99:fb:be:b4:2f:41:f9:d6:43:ce:
         41:25:ee:a1:5b:b1:23:e0:e5:19:26:5e:a9:6f:85:2d:ee:cb:
         fe:df:1e:16:70:73:b9:1c:0c:2f:2d:9f:1f:a9:26:cf:2a:2f:
         f3:ac:b4:59:4e:a9:9b:44:cb:60:7c:40:95:74:df:24:bb:6e:
         46:55:55:c9:79:6e:b9:90:7a:65:e2:be:0b:05:5b:89:55:f1:
         87:96:ae:39:7b:c9:5d:9b:f6:8e:0d:aa:78:57:ec:b3:ac:fe:
         98:91:2c:75:dd:1a:d9:d2:98:4e:1d:ad:2b:31:ea:f7:68:27:
         23:3a:44:3d:3d:88:84:96:56:d7:e1:8e:62:d7:19:48:3f:30:
         f0:eb:00:7e:2e:74:0a:25:7e:1f:38:bf:c7:ea:f0:ab:3d:be:
         03:a2:c6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:21:28 2025 by rpki-client